提交 a35ad97c 编写于 作者: Z Zhonghua Guo 提交者: Linus Torvalds

ocfs2: fix deadlock risk when kmalloc failed in dlm_query_region_handler

In dlm_query_region_handler(), once kmalloc failed, it will unlock
dlm_domain_lock without lock first, then deadlock happens.
Signed-off-by: NZhonghua Guo <guozhonghua@h3c.com>
Signed-off-by: NJoseph Qi <joseph.qi@huawei.com>
Reviewed-by: NSrinivas Eeda <srinivas.eeda@oracle.com>
Tested-by: NJoseph Qi <joseph.qi@huawei.com>
Cc: Joel Becker <jlbec@evilplan.org>
Cc: Mark Fasheh <mfasheh@suse.com>
Signed-off-by: NAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: NLinus Torvalds <torvalds@linux-foundation.org>
上级 c8d888d9
...@@ -1123,7 +1123,6 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len, ...@@ -1123,7 +1123,6 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len,
struct dlm_ctxt *dlm = NULL; struct dlm_ctxt *dlm = NULL;
char *local = NULL; char *local = NULL;
int status = 0; int status = 0;
int locked = 0;
qr = (struct dlm_query_region *) msg->buf; qr = (struct dlm_query_region *) msg->buf;
...@@ -1132,10 +1131,8 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len, ...@@ -1132,10 +1131,8 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len,
/* buffer used in dlm_mast_regions() */ /* buffer used in dlm_mast_regions() */
local = kmalloc(sizeof(qr->qr_regions), GFP_KERNEL); local = kmalloc(sizeof(qr->qr_regions), GFP_KERNEL);
if (!local) { if (!local)
status = -ENOMEM; return -ENOMEM;
goto bail;
}
status = -EINVAL; status = -EINVAL;
...@@ -1144,16 +1141,15 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len, ...@@ -1144,16 +1141,15 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len,
if (!dlm) { if (!dlm) {
mlog(ML_ERROR, "Node %d queried hb regions on domain %s " mlog(ML_ERROR, "Node %d queried hb regions on domain %s "
"before join domain\n", qr->qr_node, qr->qr_domain); "before join domain\n", qr->qr_node, qr->qr_domain);
goto bail; goto out_domain_lock;
} }
spin_lock(&dlm->spinlock); spin_lock(&dlm->spinlock);
locked = 1;
if (dlm->joining_node != qr->qr_node) { if (dlm->joining_node != qr->qr_node) {
mlog(ML_ERROR, "Node %d queried hb regions on domain %s " mlog(ML_ERROR, "Node %d queried hb regions on domain %s "
"but joining node is %d\n", qr->qr_node, qr->qr_domain, "but joining node is %d\n", qr->qr_node, qr->qr_domain,
dlm->joining_node); dlm->joining_node);
goto bail; goto out_dlm_lock;
} }
/* Support for global heartbeat was added in 1.1 */ /* Support for global heartbeat was added in 1.1 */
...@@ -1163,14 +1159,15 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len, ...@@ -1163,14 +1159,15 @@ static int dlm_query_region_handler(struct o2net_msg *msg, u32 len,
"but active dlm protocol is %d.%d\n", qr->qr_node, "but active dlm protocol is %d.%d\n", qr->qr_node,
qr->qr_domain, dlm->dlm_locking_proto.pv_major, qr->qr_domain, dlm->dlm_locking_proto.pv_major,
dlm->dlm_locking_proto.pv_minor); dlm->dlm_locking_proto.pv_minor);
goto bail; goto out_dlm_lock;
} }
status = dlm_match_regions(dlm, qr, local, sizeof(qr->qr_regions)); status = dlm_match_regions(dlm, qr, local, sizeof(qr->qr_regions));
bail: out_dlm_lock:
if (locked) spin_unlock(&dlm->spinlock);
spin_unlock(&dlm->spinlock);
out_domain_lock:
spin_unlock(&dlm_domain_lock); spin_unlock(&dlm_domain_lock);
kfree(local); kfree(local);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册